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In the Claims: 



1 . (Currently Amended) A method of generating an RSA cryptographic value, 
the method comprising the steps of: 

obtaining user specific information about a user; 

dividing a potential range of RSA prime values into at least two subintervals;-and 
selecting a first user-dependent RSA prime from a range of RSA prime values in a 

first of the at least two subintervals corresponding to a user specific range of values based on 

the user specific information mapped onto the first subinterval ; and 

deriving an RSA key using the first user-dependent RSA prime . 

2. (Previously Presented) A method according to Claim 1, further 
comprising the step of: 

selecting a second user-dependent RSA prime from a range of RSA prime values in a 
second of the at least two subintervals, different from the first subinterval, corresponding to 
the user specific range of values based on the user specific information mapped onto the 
second subinterval. 

3. (Original) A method according to Claim 1 5 wherein the user specific range 
of values are mapped by linearly mapping the user specific range of values onto the first 
subinterval. 

4. (Original) A method according to Claim 2, wherein the user specific range 
of values are mapped onto the first subinterval and mapped onto the second subinterval 
utilizing the same mapping function. 

5. (Original) A method according to Claim 2, further comprising the step of 
generating a user-dependent RSA key value from the first and second user-dependent primes. 
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6. (Original) A method according to Claim 1, wherein the RSA prime values 
comprise n bits and wherein the first subinterval comprises RSA prime values from the set 

[ V2(2 W ~ 1 ) ? 2 n ~ l + 2 n ~ 3/2 ] and the second subinterval comprises RSA prime values from 
the set[ 2 n ~ X +2 n - 3/2 ,2 n l 

7. (Original) A method according to claim 2, wherein the RSA prime values 
comprise n bits and wherein the difference between the first RSA prime and the second RSA 
prime is greater than 2 n ~ 2 . 

8. (Original) A method according to Claim 3, wherein the first subinterval 

comprises an interval [a,b], wherein the user specific range comprises an interval [c,d] and 

wherein the linear mapping function comprises the function defined by, 

J-** x , u d-c be -ad 

F(x) = ux + v, where u = and v = . 

b—a b-a 

9. (Original) A method according to Claim 1 further comprising the step of 
selecting a second RSA prime from the potential range of RSA prime values. 

10. (Original) A method according to Claim 1 , wherein the user specific 
information is biometric information. 

1 1 . (Original) A method according to Claim 1 , wherein the user specific 
information is a globally unique user identification. 

12. (Previously Presented) A method according to Claim 1 , wherein the 
step of selecting a first user-dependent RSA prime comprises the steps of: 

selecting a random point in the range of RSA prime values in the first subinterval 
corresponding to the mapped user specific range of values; and 

utilizing the random point as a starting point for a search for a prime number (p) in the 
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range of RSA prime values in the first subinterval corresponding to the mapped user specific 
range of values. 

13. (Original) A method according to Claim 12, further comprising the steps 

of: 

determining if a candidate for p is considered outside the range of RSA prime values 
in the first subinterval corresponding to the mapped user specific range of values; 

selecting a new random point as a search starting point if a candidate for p is 
considered outside the range of RSA prime values in the first subinterval corresponding to the 
mapped user specific range of values; and 

restarting the search for p utilizing the new random point. 

14. (Currently Amended) A system for generating an RSA cryptographic value, 
comprising: 

means for obtaining user specific information about a user; 
means for determining a user specific range of values based on the user specific 
information; 

means for dividing a potential range of RSA prime values into at least two 
subintervals; 

means for mapping the user specific range of values onto a first of the at least two 
subintervals; and 

means for selecting a first user-dependent RSA prime from the range of RSA prime 
values in the first of the at least two subintervals corresponding to the mapped user specific 
range of values ; and 

means for deriving an RSA key using the first user-dependent RSA prime . 



15. (Previously Presented) A system according to Claim 14, further 

comprising: 
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means for mapping the user specific range of values onto a second of the at least two 
subintervals, different from the first of the at least two subintervals; 

means for selecting a second user-dependent RS A prime from the range of RS A prime 
values in the second of the at least two subintervals corresponding to the mapped user 
specific range of values. 

16. (Original) A system according to Claim 15, wherein the means for 
mapping comprises means for linearly mapping the user specific range of values onto a first 
of the at least two subintervals. 

1 7. (Original) A system according to Claim 16, wherein the means for 
mapping the user specific range of values onto a first of the at least two subintervals and the 
means for mapping the user specific range of values onto a second of the at least two 
subintervals, different from the first of the at least two subintervals utilize the same mapping 
function. 

18. (Currently amended) A system according to Claim 15, wherein the means for 
deriving an RSAkev using the first user-dependent RS A prime further comprising comprises 
means for generating a user-dependent RSAkey value from the first and second user- 
dependent primes. < 

19. (Original) A system according to Claim 14, wherein the RSA prime values 
comprise n bits and wherein the first subinterval comprises RSA prime values from the set 

[ V2(2 n ~ l ), 2 n ~ X + 2 n ~ 3 1 2 ] and the second subinterval comprises RSA prime values from 



20. (Original) A system according to claim 15, wherein the RSA prime values 
comprise n bits and wherein the difference between the first RSA prime and the second RSA 



the set [ 2 



n-l 



+ 2 




prime is greater than 2 1 



n-2 
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21 . (Original) A system according to Claim 16, wherein the first sub interval 
comprises an interval [a,b], wherein the user specific range comprises an interval [c,d] and 
wherein the linear mapping function comprises the function defined by, 



22. (Original) A system according to Claim 14 further comprising means for 
selecting a second RS A prime from the potential range of RS A prime values. 

23. (Original) A system according to Claim 14, wherein the user specific 
information is biometric information. 

24. (Original) A system according to Claim 14, wherein the user specific 
information is a globally unique user identification. 

25. (Previously Presented) A system according to Claim 14, wherein the 
means for selecting a first user-dependent RSA prime comprises: 

means for selecting a random point in the range of RSA prime values in the first of 
the at least two subintervals corresponding to the mapped user specific range of values; 

means for utilizing the random point as a starting point for a search for a prime 
number (p) in the range of RSA prime values in the first of the at least two subintervals 
corresponding to the mapped user specific range of values. 

26. (Original) A system according to Claim 25, further comprising: 
means for determining if a candidate for p is considered outside the range of RSA 

prime values in the first of the at least two subintervals corresponding to the mapped user 
specific range of values; 

means for selecting a new random point as a search starting point if a candidate for p 



F(x) = ux + v, where u — 



d-c 
b-a 



and v = 



be — ad 



b-a 
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is considered outside the range of RSA prime values in the first of the at least two 
subintervals corresponding to the mapped user specific range of values; and 
means for restarting the search for p utilizing the new random point. 

27. (Currently Amended) A computer program product for generating an RSA 
cryptographic value, comprising: 

a computer readable storage medium having computer readable program code means 
embodied in said medium, said computer readable program code means comprising: 

computer-readable program code means for obtaining user specific information about 

a user; 

computer-readable program code means for determining a user specific range of 
values based on the user specific information; 

computer-readable program code means for dividing a potential range of RSA prime 
values into at least two subintervals; 

computer-readable program code means for mapping the user specific range of values 
onto a first of the at least two subintervals; and 

computer-readable program code means for selecting a first user-dependent RSA 
prime from the range of RSA prime values in the first of the at least two subintervals 
corresponding to the mapped user specific range of values ; and 

computer-readable program code means for deriving an RSA key using the first user- 
dependent RSA prime . 

28. (Previously Presented) A computer program product according to Claim 
27, further comprising: 

computer-readable program code means for mapping the user specific range of values 
onto a second of the at least two subintervals, different from the first of the at least two 
subintervals; 
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computer-readable program code means for selecting a second user-dependent RSA 
prime from the range of RSA prime values in the second of the at least two subintervals 
corresponding to the mapped user specific range of values. 

29. (Original) A computer program product according to Claim 28, wherein 
the computer-readable program code means for mapping comprises computer-readable 
program code means for linearly mapping the user specific range of values onto a first of the 
at least two subintervals. 

30. (Original) A computer program product according to Claim 29, wherein 
the computer-readable program code means for mapping the user specific range of values 
onto a first of the at least two subintervals and the computer-readable program code means 
for mapping the user specific range of values onto a second of the at least two subintervals, 
different from the first of the at least two subintervals utilize the same mapping function. 

3 1 . (Currently Amended) A computer program product according to Claim 28, 
wherein the computer-readable program code means for deriving an RSA key using the first 
user-dependent RSA prime further comprising comprises computer readable program code 
means for generating a user-dependent RSA key value from the first and second user- 
dependent primes. 

32. (Original) A computer program product according to Claim 26, wherein 
the RSA prime values comprise n bits and wherein the first subinterval comprises RSA prime 

values from the set [ V2(2 W_1 ), 2"" 1 + 2 W_3/2 ] and the second subinterval comprises RSA 
prime values from the set [ 2 W_1 + 2 w_3/2 ,2" ]. 

33. (Original) A computer program product according to claim 28, wherein 
the RSA prime values comprise n bits and wherein the difference between the first RSA 
prime and the second RSA prime is greater than 2 n " 2 . 
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34. (Original) A computer program product according to Claim 29, wherein 
the first subinterval comprises an interval [a,b], wherein the user specific range comprises an 
interval [c,d] and wherein the linear mapping function comprises the function defined by, 



35. (Original) A computer program product according to Claim 27 further 
comprising computer-readable program code means for selecting a second RS A prime from 
the potential range of RSA prime values. 

36. (Original) A computer program product according to Claim 27, wherein 
the user specific information is biometric information. 

37. (Original) A computer program product according to Claim 27, wherein 
the user specific information is a globally unique user identification. 

38. (Previously Presented) A computer program product according to Claim 
27, wherein the computer-readable program code means for selecting a first user-dependent 
RSA prime comprises : 

computer-readable program code means for selecting a random point in the range of 
RSA prime values in the first of the at least two subintervals corresponding to the mapped 
user specific range of values; 

computer-readable program code means for utilizing the random point as a starting 
point for a search for a prime number (p) in the range of RSA prime values in the first of the 
at least two subintervals corresponding to the mapped user specific range of values. 



F(x) = nx + v y where u — 



d -c 
b-a 



and v = 



be — ad 



b-a 



39. (Original) A computer program product according to Claim 38, further 
comprising: 
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computer-readable program code means for determining if a candidate for p is 
considered outside the range of RS A prime values in the first of the at least two subintervals 
corresponding to the mapped user specific range of values; 

computer-readable program code means for selecting a new random point as a search 
starting point if a candidate for p is considered outside the range of RS A prime values in the 
first of the at least two subintervals corresponding to the mapped user specific range of 
values; and 

computer-readable program code means for restarting the search for p utilizing the 
new random point. 

40. (Currently Amended) A method of generating a cryptographic value 
corresponding to a source entity, the method comprising the steps of: 

obtaining entity specific information associated with the source entity ;^aed 
selecting a cryptographic value from a range of cryptographic values based on the 
entity specific information, wherein the range of cryptographic values based on the entity 
specific information is disjoint with ranges of cryptographic values associated with entity 
specific information associated with entities other than the source entit y; and 

deriving a cryptographic key value based on the selected cryptographic value . 

41 . (Original) A method according to Claim 40, wherein the entity specific 
information comprises biometric information associated with a user. 

42. (Original) A method according to Claim 40, wherein the entity specific 
information comprises a globally unique user identification associated with a user. 

43. (Original) A method according to Claim 40, wherein the entity specific 
information comprises a company identification. 
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44. (Currently Amended) A method according to Claim 40, wherein the 
cryptographic value comprises an RS A key and wherein the step of selecting comprises 
selecting the RSA key from a portion of the range of potential RSA key values based on the 
entity specific information, wherein portion of the range of potential RSA key values is 
defined by mapping an entity specific range of values onto the range of potential key values 
and wherein the step of deriving a cryptographic key value based on the selected 
cryptographic value comprises providing the selected RSA key as the derived cryptographic 
key value . 

45. (Original) A method according to Claim 40, further comprising the step of 
authenticating the source entity of the cryptographic value by determining if the 
cryptographic value is within the range of cryptographic values based on the entity specific 
information associated with the source entity. 

46. (Currently Amended) A system for generating a cryptographic value 
corresponding to a source entity, comprising: 

means for obtaining entity specific information associated with the source entity;^and 
means for selecting a cryptographic value from a range of cryptographic values based 
on the entity specific information, wherein the range of cryptographic values based on the 
entity specific information is disjoint with ranges of cryptographic values associated with 
entity specific information associated with entities other than the source entit y; and 

means for deriving a cryptographic key value based on the selected cryptographic 

value . 

47. (Original) A system according to Claim 46, wherein the entity specific 
information comprises biometric information associated with a user. 

48. (Original) A system according to Claim 46, wherein the entity specific 
information comprises a globally unique user identification associated with a user. 
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49. (Original) A system according to Claim 46, wherein the entity specific 
information comprises a company identification. 

50. (Currently Amended) A system according to Claim 46, wherein the 
cryptographic value comprises an RS A key and wherein the means for selecting comprises 
means for selecting the RS A key from a portion of the range of potential RSA key values 
based on the entity specific information, wherein portion of the range of potential RSA key 
values is defined by mapping an entity specific range of values onto the range of potential 
key values and wherein the means for deriving a cryptographic key value based on the 
selected cryptographic value comprises means for providing the selected RSA key as the 
derived cryptographic key value . 

51. (Original) A system according to Claim 46, further comprising means for 
authenticating the source entity of the cryptographic value by determining if the 
cryptographic value is within the range of cryptographic values based on the entity specific 
information associated with the source entity. 

52. (Currently Amended) A computer program product for generating a 
cryptographic value corresponding to a source entity, comprising: 

a computer readable storage medium having computer readable program code means 
embodied in said medium, said computer readable program code means comprising: 

computer readable program code means for obtaining entity specific information 
associated with the source entity;-and 

computer readable program code means for selecting a cryptographic value from a 
range of cryptographic values based on the entity specific information, wherein the range of 
cryptographic values based on the entity specific information is disjoint with ranges of 
cryptographic values associated with entity specific information associated with entities other 
than the source entit y; and 
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computer readable program code means for deriving a cryptographic key value based 
on the selected cryptographic value . 

53. (Original) A computer program product according to Claim 52, wherein 
the entity specific information comprises biometric information associated with a user. 




54. (Original) A computer program product according to Claim 52, wherein 
the entity specific information comprises a globally unique user identification associated with 
a user. 



55. (Original) A computer program product according to Claim 52, wherein 
the entity specific information comprises a company identification. 

56. (Currently Amended) A computer program product according to Claim 52, 
wherein the cryptographic value comprises an RS A key and wherein the computer readable 
program code means for selecting comprises computer readable program code means for 
selecting the RS A key from a portion of the range of potential RS A key values based on the 
entity specific information, wherein portion of the range of potential RS A key values is 
defined by mapping an entity specific range of values onto the range of potential key values 
and wherein the computer readable program code means for deriving a cryptographic key 
value based on the selected cryptographic value comprises computer readable program code 
means for providing the selected RSA key as the derived cryptographic key value . 

57. (Original) A computer program product according to Claim 52, further 
comprising computer readable program code means for authenticating the source entity of the 
cryptographic value by determining if the cryptographic value is within the range of 
cryptographic values based on the entity specific information associated with the source 
entity. 



